atm: Fix dma_free_coherent() size

commit 4d984b0574ff708e66152763fbfdef24ea40933f upstream.

The size of the buffer is not the same when alloc'd with
dma_alloc_coherent() in he_init_tpdrq() and freed.

Fixes: 1da177e4c3f4 ("Linux-2.6.12-rc2")
Cc: <stable@vger.kernel.org>
Signed-off-by: Thomas Fourier <fourier.thomas@gmail.com>
Link: https://patch.msgid.link/20260107090141.80900-2-fourier.thomas@gmail.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

diff --git a/drivers/atm/he.c b/drivers/atm/he.c
index 17f44abc9418ead4d9cc9c6ffb6e26060724d506..ee0c379415b450ffed3a54a40df0e36d4a78b3d4 100644 (file)
--- a/drivers/atm/he.c
+++ b/drivers/atm/he.c
@@ -1590,7 +1590,8 @@ he_stop(struct he_dev *he_dev)
                                  he_dev->tbrq_base, he_dev->tbrq_phys);
 
        if (he_dev->tpdrq_base)
-               dma_free_coherent(&he_dev->pci_dev->dev, CONFIG_TBRQ_SIZE * sizeof(struct he_tbrq),
+               dma_free_coherent(&he_dev->pci_dev->dev,
+                                 CONFIG_TPDRQ_SIZE * sizeof(struct he_tpdrq),
                                  he_dev->tpdrq_base, he_dev->tpdrq_phys);
 
        dma_pool_destroy(he_dev->tpd_pool);